cribl-control-plane 0.0.39__py3-none-any.whl → 0.5.0b3__py3-none-any.whl

cribl_control_plane/models/inputcriblhttp.py

@@ -1,10 +1,14 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
+from cribl_control_plane import models, utils
 from cribl_control_plane.types import BaseModel
+from cribl_control_plane.utils import validate_open_enum
 from enum import Enum
 import pydantic
-from typing import Any, List, Optional
+from pydantic import field_serializer
+from pydantic.functional_validators import PlainValidator
+from typing import List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -23,20 +27,32 @@ class InputCriblHTTPConnection(BaseModel):
     pipeline: Optional[str] = None
 
 
-class InputCriblHTTPMode(str, Enum):
+class InputCriblHTTPMode(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
+    # Smart
     SMART = "smart"
+    # Always On
     ALWAYS = "always"
 
 
-class InputCriblHTTPCompression(str, Enum):
+class InputCriblHTTPCompression(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""Codec to use to compress the persisted data"""
 
+    # None
     NONE = "none"
+    # Gzip
     GZIP = "gzip"
 
 
+class InputCriblHTTPPqControlsTypedDict(TypedDict):
+    pass
+
+
+class InputCriblHTTPPqControls(BaseModel):
+    pass
+
+
 class InputCriblHTTPPqTypedDict(TypedDict):
     mode: NotRequired[InputCriblHTTPMode]
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
@@ -52,10 +68,13 @@ class InputCriblHTTPPqTypedDict(TypedDict):
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
     compress: NotRequired[InputCriblHTTPCompression]
     r"""Codec to use to compress the persisted data"""
+    pq_controls: NotRequired[InputCriblHTTPPqControlsTypedDict]
 
 
 class InputCriblHTTPPq(BaseModel):
-    mode: Optional[InputCriblHTTPMode] = InputCriblHTTPMode.ALWAYS
+    mode: Annotated[
+        Optional[InputCriblHTTPMode], PlainValidator(validate_open_enum(False))
+    ] = InputCriblHTTPMode.ALWAYS
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
     max_buffer_size: Annotated[
@@ -79,18 +98,60 @@ class InputCriblHTTPPq(BaseModel):
     path: Optional[str] = "$CRIBL_HOME/state/queues"
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
 
-    compress: Optional[InputCriblHTTPCompression] = InputCriblHTTPCompression.NONE
+    compress: Annotated[
+        Optional[InputCriblHTTPCompression], PlainValidator(validate_open_enum(False))
+    ] = InputCriblHTTPCompression.NONE
     r"""Codec to use to compress the persisted data"""
 
+    pq_controls: Annotated[
+        Optional[InputCriblHTTPPqControls], pydantic.Field(alias="pqControls")
+    ] = None
+
+    @field_serializer("mode")
+    def serialize_mode(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblHTTPMode(value)
+            except ValueError:
+                return value
+        return value
+
+    @field_serializer("compress")
+    def serialize_compress(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblHTTPCompression(value)
+            except ValueError:
+                return value
+        return value
+
+
+class InputCriblHTTPAuthTokenTypedDict(TypedDict):
+    token_secret: str
+    r"""Select or create a stored text secret"""
+    enabled: NotRequired[bool]
+    description: NotRequired[str]
+    r"""Optional token description"""
+
+
+class InputCriblHTTPAuthToken(BaseModel):
+    token_secret: Annotated[str, pydantic.Field(alias="tokenSecret")]
+    r"""Select or create a stored text secret"""
+
+    enabled: Optional[bool] = True
 
-class InputCriblHTTPMinimumTLSVersion(str, Enum):
+    description: Optional[str] = None
+    r"""Optional token description"""
+
+
+class InputCriblHTTPMinimumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
     TL_SV1 = "TLSv1"
     TL_SV1_1 = "TLSv1.1"
     TL_SV1_2 = "TLSv1.2"
     TL_SV1_3 = "TLSv1.3"
 
 
-class InputCriblHTTPMaximumTLSVersion(str, Enum):
+class InputCriblHTTPMaximumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
     TL_SV1 = "TLSv1"
     TL_SV1_1 = "TLSv1.1"
     TL_SV1_2 = "TLSv1.2"
@@ -99,6 +160,12 @@ class InputCriblHTTPMaximumTLSVersion(str, Enum):
 
 class InputCriblHTTPTLSSettingsServerSideTypedDict(TypedDict):
     disabled: NotRequired[bool]
+    request_cert: NotRequired[bool]
+    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
+    reject_unauthorized: NotRequired[bool]
+    r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)"""
+    common_name_regex: NotRequired[str]
+    r"""Regex matching allowable common names in peer certificates' subject attribute"""
     certificate_name: NotRequired[str]
     r"""The name of the predefined certificate"""
     priv_key_path: NotRequired[str]
@@ -109,10 +176,6 @@ class InputCriblHTTPTLSSettingsServerSideTypedDict(TypedDict):
     r"""Path on server containing certificates to use. PEM format. Can reference $ENV_VARS."""
     ca_path: NotRequired[str]
     r"""Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS."""
-    request_cert: NotRequired[bool]
-    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
-    reject_unauthorized: NotRequired[Any]
-    common_name_regex: NotRequired[Any]
     min_version: NotRequired[InputCriblHTTPMinimumTLSVersion]
     max_version: NotRequired[InputCriblHTTPMaximumTLSVersion]
 
@@ -120,6 +183,19 @@ class InputCriblHTTPTLSSettingsServerSideTypedDict(TypedDict):
 class InputCriblHTTPTLSSettingsServerSide(BaseModel):
     disabled: Optional[bool] = True
 
+    request_cert: Annotated[Optional[bool], pydantic.Field(alias="requestCert")] = False
+    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
+
+    reject_unauthorized: Annotated[
+        Optional[bool], pydantic.Field(alias="rejectUnauthorized")
+    ] = True
+    r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)"""
+
+    common_name_regex: Annotated[
+        Optional[str], pydantic.Field(alias="commonNameRegex")
+    ] = "/.*/"
+    r"""Regex matching allowable common names in peer certificates' subject attribute"""
+
     certificate_name: Annotated[
         Optional[str], pydantic.Field(alias="certificateName")
     ] = None
@@ -137,25 +213,40 @@ class InputCriblHTTPTLSSettingsServerSide(BaseModel):
     ca_path: Annotated[Optional[str], pydantic.Field(alias="caPath")] = None
     r"""Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS."""
 
-    request_cert: Annotated[Optional[bool], pydantic.Field(alias="requestCert")] = False
-    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
-
-    reject_unauthorized: Annotated[
-        Optional[Any], pydantic.Field(alias="rejectUnauthorized")
-    ] = None
-
-    common_name_regex: Annotated[
-        Optional[Any], pydantic.Field(alias="commonNameRegex")
-    ] = None
-
     min_version: Annotated[
-        Optional[InputCriblHTTPMinimumTLSVersion], pydantic.Field(alias="minVersion")
+        Annotated[
+            Optional[InputCriblHTTPMinimumTLSVersion],
+            PlainValidator(validate_open_enum(False)),
+        ],
+        pydantic.Field(alias="minVersion"),
     ] = None
 
     max_version: Annotated[
-        Optional[InputCriblHTTPMaximumTLSVersion], pydantic.Field(alias="maxVersion")
+        Annotated[
+            Optional[InputCriblHTTPMaximumTLSVersion],
+            PlainValidator(validate_open_enum(False)),
+        ],
+        pydantic.Field(alias="maxVersion"),
     ] = None
 
+    @field_serializer("min_version")
+    def serialize_min_version(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblHTTPMinimumTLSVersion(value)
+            except ValueError:
+                return value
+        return value
+
+    @field_serializer("max_version")
+    def serialize_max_version(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblHTTPMaximumTLSVersion(value)
+            except ValueError:
+                return value
+        return value
+
 
 class InputCriblHTTPMetadatumTypedDict(TypedDict):
     name: str
@@ -192,8 +283,8 @@ class InputCriblHTTPTypedDict(TypedDict):
     pq: NotRequired[InputCriblHTTPPqTypedDict]
     host: NotRequired[str]
     r"""Address to bind on. Defaults to 0.0.0.0 (all addresses)."""
-    auth_tokens: NotRequired[List[str]]
-    r"""Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted."""
+    auth_tokens: NotRequired[List[InputCriblHTTPAuthTokenTypedDict]]
+    r"""Shared secrets to be used by connected environments to authorize connections. These tokens should be installed in Cribl HTTP destinations in connected environments."""
     tls: NotRequired[InputCriblHTTPTLSSettingsServerSideTypedDict]
     max_active_req: NotRequired[float]
     r"""Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput."""
@@ -258,10 +349,10 @@ class InputCriblHTTP(BaseModel):
     host: Optional[str] = "0.0.0.0"
     r"""Address to bind on. Defaults to 0.0.0.0 (all addresses)."""
 
-    auth_tokens: Annotated[Optional[List[str]], pydantic.Field(alias="authTokens")] = (
-        None
-    )
-    r"""Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted."""
+    auth_tokens: Annotated[
+        Optional[List[InputCriblHTTPAuthToken]], pydantic.Field(alias="authTokens")
+    ] = None
+    r"""Shared secrets to be used by connected environments to authorize connections. These tokens should be installed in Cribl HTTP destinations in connected environments."""
 
     tls: Optional[InputCriblHTTPTLSSettingsServerSide] = None
 

cribl_control_plane/models/inputcribllakehttp.py

@@ -1,10 +1,14 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
+from cribl_control_plane import models, utils
 from cribl_control_plane.types import BaseModel
+from cribl_control_plane.utils import validate_open_enum
 from enum import Enum
 import pydantic
-from typing import Any, List, Optional
+from pydantic import field_serializer
+from pydantic.functional_validators import PlainValidator
+from typing import List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
 
@@ -23,20 +27,32 @@ class InputCriblLakeHTTPConnection(BaseModel):
     pipeline: Optional[str] = None
 
 
-class InputCriblLakeHTTPMode(str, Enum):
+class InputCriblLakeHTTPMode(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
+    # Smart
     SMART = "smart"
+    # Always On
     ALWAYS = "always"
 
 
-class InputCriblLakeHTTPCompression(str, Enum):
+class InputCriblLakeHTTPCompression(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""Codec to use to compress the persisted data"""
 
+    # None
     NONE = "none"
+    # Gzip
     GZIP = "gzip"
 
 
+class InputCriblLakeHTTPPqControlsTypedDict(TypedDict):
+    pass
+
+
+class InputCriblLakeHTTPPqControls(BaseModel):
+    pass
+
+
 class InputCriblLakeHTTPPqTypedDict(TypedDict):
     mode: NotRequired[InputCriblLakeHTTPMode]
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
@@ -52,10 +68,13 @@ class InputCriblLakeHTTPPqTypedDict(TypedDict):
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
     compress: NotRequired[InputCriblLakeHTTPCompression]
     r"""Codec to use to compress the persisted data"""
+    pq_controls: NotRequired[InputCriblLakeHTTPPqControlsTypedDict]
 
 
 class InputCriblLakeHTTPPq(BaseModel):
-    mode: Optional[InputCriblLakeHTTPMode] = InputCriblLakeHTTPMode.ALWAYS
+    mode: Annotated[
+        Optional[InputCriblLakeHTTPMode], PlainValidator(validate_open_enum(False))
+    ] = InputCriblLakeHTTPMode.ALWAYS
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
     max_buffer_size: Annotated[
@@ -79,20 +98,43 @@ class InputCriblLakeHTTPPq(BaseModel):
     path: Optional[str] = "$CRIBL_HOME/state/queues"
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
 
-    compress: Optional[InputCriblLakeHTTPCompression] = (
-        InputCriblLakeHTTPCompression.NONE
-    )
+    compress: Annotated[
+        Optional[InputCriblLakeHTTPCompression],
+        PlainValidator(validate_open_enum(False)),
+    ] = InputCriblLakeHTTPCompression.NONE
     r"""Codec to use to compress the persisted data"""
 
+    pq_controls: Annotated[
+        Optional[InputCriblLakeHTTPPqControls], pydantic.Field(alias="pqControls")
+    ] = None
 
-class InputCriblLakeHTTPMinimumTLSVersion(str, Enum):
+    @field_serializer("mode")
+    def serialize_mode(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblLakeHTTPMode(value)
+            except ValueError:
+                return value
+        return value
+
+    @field_serializer("compress")
+    def serialize_compress(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblLakeHTTPCompression(value)
+            except ValueError:
+                return value
+        return value
+
+
+class InputCriblLakeHTTPMinimumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
     TL_SV1 = "TLSv1"
     TL_SV1_1 = "TLSv1.1"
     TL_SV1_2 = "TLSv1.2"
     TL_SV1_3 = "TLSv1.3"
 
 
-class InputCriblLakeHTTPMaximumTLSVersion(str, Enum):
+class InputCriblLakeHTTPMaximumTLSVersion(str, Enum, metaclass=utils.OpenEnumMeta):
     TL_SV1 = "TLSv1"
     TL_SV1_1 = "TLSv1.1"
     TL_SV1_2 = "TLSv1.2"
@@ -101,6 +143,12 @@ class InputCriblLakeHTTPMaximumTLSVersion(str, Enum):
 
 class InputCriblLakeHTTPTLSSettingsServerSideTypedDict(TypedDict):
     disabled: NotRequired[bool]
+    request_cert: NotRequired[bool]
+    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
+    reject_unauthorized: NotRequired[bool]
+    r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)"""
+    common_name_regex: NotRequired[str]
+    r"""Regex matching allowable common names in peer certificates' subject attribute"""
     certificate_name: NotRequired[str]
     r"""The name of the predefined certificate"""
     priv_key_path: NotRequired[str]
@@ -111,10 +159,6 @@ class InputCriblLakeHTTPTLSSettingsServerSideTypedDict(TypedDict):
     r"""Path on server containing certificates to use. PEM format. Can reference $ENV_VARS."""
     ca_path: NotRequired[str]
     r"""Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS."""
-    request_cert: NotRequired[bool]
-    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
-    reject_unauthorized: NotRequired[Any]
-    common_name_regex: NotRequired[Any]
     min_version: NotRequired[InputCriblLakeHTTPMinimumTLSVersion]
     max_version: NotRequired[InputCriblLakeHTTPMaximumTLSVersion]
 
@@ -122,6 +166,19 @@ class InputCriblLakeHTTPTLSSettingsServerSideTypedDict(TypedDict):
 class InputCriblLakeHTTPTLSSettingsServerSide(BaseModel):
     disabled: Optional[bool] = True
 
+    request_cert: Annotated[Optional[bool], pydantic.Field(alias="requestCert")] = False
+    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
+
+    reject_unauthorized: Annotated[
+        Optional[bool], pydantic.Field(alias="rejectUnauthorized")
+    ] = True
+    r"""Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)"""
+
+    common_name_regex: Annotated[
+        Optional[str], pydantic.Field(alias="commonNameRegex")
+    ] = "/.*/"
+    r"""Regex matching allowable common names in peer certificates' subject attribute"""
+
     certificate_name: Annotated[
         Optional[str], pydantic.Field(alias="certificateName")
     ] = None
@@ -139,27 +196,40 @@ class InputCriblLakeHTTPTLSSettingsServerSide(BaseModel):
     ca_path: Annotated[Optional[str], pydantic.Field(alias="caPath")] = None
     r"""Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS."""
 
-    request_cert: Annotated[Optional[bool], pydantic.Field(alias="requestCert")] = False
-    r"""Require clients to present their certificates. Used to perform client authentication using SSL certs."""
-
-    reject_unauthorized: Annotated[
-        Optional[Any], pydantic.Field(alias="rejectUnauthorized")
-    ] = None
-
-    common_name_regex: Annotated[
-        Optional[Any], pydantic.Field(alias="commonNameRegex")
-    ] = None
-
     min_version: Annotated[
-        Optional[InputCriblLakeHTTPMinimumTLSVersion],
+        Annotated[
+            Optional[InputCriblLakeHTTPMinimumTLSVersion],
+            PlainValidator(validate_open_enum(False)),
+        ],
         pydantic.Field(alias="minVersion"),
     ] = None
 
     max_version: Annotated[
-        Optional[InputCriblLakeHTTPMaximumTLSVersion],
+        Annotated[
+            Optional[InputCriblLakeHTTPMaximumTLSVersion],
+            PlainValidator(validate_open_enum(False)),
+        ],
         pydantic.Field(alias="maxVersion"),
     ] = None
 
+    @field_serializer("min_version")
+    def serialize_min_version(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblLakeHTTPMinimumTLSVersion(value)
+            except ValueError:
+                return value
+        return value
+
+    @field_serializer("max_version")
+    def serialize_max_version(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblLakeHTTPMaximumTLSVersion(value)
+            except ValueError:
+                return value
+        return value
+
 
 class InputCriblLakeHTTPMetadatumTypedDict(TypedDict):
     name: str
@@ -187,12 +257,44 @@ class InputCriblLakeHTTPAuthTokensExtMetadatum(BaseModel):
     r"""JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)"""
 
 
+class SplunkHecMetadataTypedDict(TypedDict):
+    enabled: NotRequired[bool]
+    default_dataset: NotRequired[str]
+    allowed_indexes_at_token: NotRequired[List[str]]
+
+
+class SplunkHecMetadata(BaseModel):
+    enabled: Optional[bool] = None
+
+    default_dataset: Annotated[
+        Optional[str], pydantic.Field(alias="defaultDataset")
+    ] = None
+
+    allowed_indexes_at_token: Annotated[
+        Optional[List[str]], pydantic.Field(alias="allowedIndexesAtToken")
+    ] = None
+
+
+class ElasticsearchMetadataTypedDict(TypedDict):
+    enabled: NotRequired[bool]
+    default_dataset: NotRequired[str]
+
+
+class ElasticsearchMetadata(BaseModel):
+    enabled: Optional[bool] = None
+
+    default_dataset: Annotated[
+        Optional[str], pydantic.Field(alias="defaultDataset")
+    ] = None
+
+
 class InputCriblLakeHTTPAuthTokensExtTypedDict(TypedDict):
     token: str
     description: NotRequired[str]
     metadata: NotRequired[List[InputCriblLakeHTTPAuthTokensExtMetadatumTypedDict]]
     r"""Fields to add to events referencing this token"""
-    enable_splunk_hec: NotRequired[bool]
+    splunk_hec_metadata: NotRequired[SplunkHecMetadataTypedDict]
+    elasticsearch_metadata: NotRequired[ElasticsearchMetadataTypedDict]
 
 
 class InputCriblLakeHTTPAuthTokensExt(BaseModel):
@@ -203,9 +305,13 @@ class InputCriblLakeHTTPAuthTokensExt(BaseModel):
     metadata: Optional[List[InputCriblLakeHTTPAuthTokensExtMetadatum]] = None
     r"""Fields to add to events referencing this token"""
 
-    enable_splunk_hec: Annotated[
-        Optional[bool], pydantic.Field(alias="enableSplunkHec")
-    ] = False
+    splunk_hec_metadata: Annotated[
+        Optional[SplunkHecMetadata], pydantic.Field(alias="splunkHecMetadata")
+    ] = None
+
+    elasticsearch_metadata: Annotated[
+        Optional[ElasticsearchMetadata], pydantic.Field(alias="elasticsearchMetadata")
+    ] = None
 
 
 class InputCriblLakeHTTPTypedDict(TypedDict):

cribl_control_plane/models/inputcriblmetrics.py

@@ -1,9 +1,13 @@
 """Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT."""
 
 from __future__ import annotations
+from cribl_control_plane import models, utils
 from cribl_control_plane.types import BaseModel
+from cribl_control_plane.utils import validate_open_enum
 from enum import Enum
 import pydantic
+from pydantic import field_serializer
+from pydantic.functional_validators import PlainValidator
 from typing import List, Optional
 from typing_extensions import Annotated, NotRequired, TypedDict
 
@@ -23,20 +27,32 @@ class InputCriblmetricsConnection(BaseModel):
     pipeline: Optional[str] = None
 
 
-class InputCriblmetricsMode(str, Enum):
+class InputCriblmetricsMode(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
+    # Smart
     SMART = "smart"
+    # Always On
     ALWAYS = "always"
 
 
-class InputCriblmetricsCompression(str, Enum):
+class InputCriblmetricsCompression(str, Enum, metaclass=utils.OpenEnumMeta):
     r"""Codec to use to compress the persisted data"""
 
+    # None
     NONE = "none"
+    # Gzip
     GZIP = "gzip"
 
 
+class InputCriblmetricsPqControlsTypedDict(TypedDict):
+    pass
+
+
+class InputCriblmetricsPqControls(BaseModel):
+    pass
+
+
 class InputCriblmetricsPqTypedDict(TypedDict):
     mode: NotRequired[InputCriblmetricsMode]
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
@@ -52,10 +68,13 @@ class InputCriblmetricsPqTypedDict(TypedDict):
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
     compress: NotRequired[InputCriblmetricsCompression]
     r"""Codec to use to compress the persisted data"""
+    pq_controls: NotRequired[InputCriblmetricsPqControlsTypedDict]
 
 
 class InputCriblmetricsPq(BaseModel):
-    mode: Optional[InputCriblmetricsMode] = InputCriblmetricsMode.ALWAYS
+    mode: Annotated[
+        Optional[InputCriblmetricsMode], PlainValidator(validate_open_enum(False))
+    ] = InputCriblmetricsMode.ALWAYS
     r"""With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine."""
 
     max_buffer_size: Annotated[
@@ -79,9 +98,34 @@ class InputCriblmetricsPq(BaseModel):
     path: Optional[str] = "$CRIBL_HOME/state/queues"
     r"""The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>"""
 
-    compress: Optional[InputCriblmetricsCompression] = InputCriblmetricsCompression.NONE
+    compress: Annotated[
+        Optional[InputCriblmetricsCompression],
+        PlainValidator(validate_open_enum(False)),
+    ] = InputCriblmetricsCompression.NONE
     r"""Codec to use to compress the persisted data"""
 
+    pq_controls: Annotated[
+        Optional[InputCriblmetricsPqControls], pydantic.Field(alias="pqControls")
+    ] = None
+
+    @field_serializer("mode")
+    def serialize_mode(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblmetricsMode(value)
+            except ValueError:
+                return value
+        return value
+
+    @field_serializer("compress")
+    def serialize_compress(self, value):
+        if isinstance(value, str):
+            try:
+                return models.InputCriblmetricsCompression(value)
+            except ValueError:
+                return value
+        return value
+
 
 class InputCriblmetricsMetadatumTypedDict(TypedDict):
     name: str